Privacy Policy

The data controller is Mustafa Güldüler, owner of the sole proprietorship (without a trade name) that operates the MakinAI platform; address: Tunalı Mah. Yenibahçe Sk. Aktaş Dilan Apt. No: 2 İç Kapı No: 1, Tepebaşı / Eskişehir. You can send your requests to [email protected].

Account data: full name, e-mail, phone number, password hash, account type and, for corporate accounts, company details.

Listing data: machine specifications, price, location (province/district), photographs and the machine type plate image.

Transaction data: listing views, phone reveal counters, enquiry and request records, order and invoice records.

Technical data: session cookie, language preference cookie, browser/operating system information and server access logs. IP addresses are stored HASHED for rate limiting and abuse analysis; they are not kept in plain text.

Membership and session management; publishing, verifying and moderating listings; enabling buyers and sellers to make contact; collecting listing and plan fees and issuing invoices; rate limiting, fraud and abuse detection; improving the service and debugging; complying with legal obligations.

Marketing messages are only sent with your separate, explicit consent, which you can withdraw at any time with a single click.

Your published listing content and — if you have consented — your contact details are shown publicly on the listing page. This is the core function of the platform.

Transfers to service providers are limited to what the service requires: e-mail and SMS delivery, the payment institution and server hosting.

Personal data in text sent to AI providers is MASKED BEFOREHAND (phone, e-mail, full name, national/tax number, IBAN and street address). If masking fails, the call is not made at all. Because this transfer may go abroad, the AI processing channel requires a separate consent.

Your personal data is never sold or rented to third parties for advertising.

YouTube videos are shown on listing pages and the YouTube API Services are used to find related videos. By using these services you are bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Data processing by Google while videos play is subject to the Google Privacy Policy (https://policies.google.com/privacy). The player sends no request to YouTube until you start playback and uses the youtube-nocookie.com domain.

The database, media files and backups are hosted in Türkiye or the European Union. The only exception is the masked text sent to AI providers described above.

Active account data is kept for as long as the account is open. Accounts with no sign-in for 24 months are anonymised after a warning.

Withdrawn listings and listing media are deleted or turned into anonymous statistics after 12 months. Messages are anonymised after 24 months. Server access logs are deleted after 12 months and masked AI request logs after 6 months.

Payment, invoice and accounting records are kept for 10 years as required by law, consent records for 10 years for evidentiary purposes, and audit logs for 5 years.

Passwords are stored only as hashes. Session tokens are signed. Endpoints such as sign-in, registration, verification codes and the contact form are rate limited.

Uploaded photographs are re-encoded; location (GPS) and device metadata are STRIPPED automatically.

Access rights are reviewed regularly, and operations that touch personal data are written to an audit log.

You have the right to access, rectify and erase your personal data, to object to processing and to data portability. Requests are answered within 30 days at the latest.

For a detailed explanation and the application procedure, see the data protection notice.

MakinAI only uses cookies that are necessary for the service to work. Details are in the cookie policy.